instrument-integration
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured instructions for SDK integration across multiple platforms (Web, Mobile, Server-side). It correctly identifies project contexts and uses appropriate package managers.
- [SAFE]: Secret management follows industry standards. The skill explicitly instructs the agent to store project tokens in environment variable files (like
.envor.env.local) and to reference them in code rather than hardcoding them. - [SAFE]: The use of the
projects-getMCP tool is a secure method for retrieving project tokens from an authenticated source. The retrieved data is used only for local configuration. - [SAFE]: Documentation and reference projects point exclusively to official vendor domains and trusted source code repositories. No suspicious external URLs or data exfiltration patterns were identified.
- [SAFE]: Command execution is restricted to standard developer workflows, such as installing dependencies through package managers and running local linting/formatting tools on files modified during the integration session.
Audit Metadata